Classifications

• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06F—ELECTRIC DIGITAL DATA PROCESSING
  • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
  • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
  • G06F21/31—User authentication
  • G06F21/34—User authentication involving the use of external additional devices, e.g. dongles or smart cards
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C9/00—Individual registration on entry or exit
  • G07C9/20—Individual registration on entry or exit involving the use of a pass
  • G07C9/215—Individual registration on entry or exit involving the use of a pass the system having a variable access-code, e.g. varied as a function of time
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
  • G07C9/00—Individual registration on entry or exit
  • G07C9/20—Individual registration on entry or exit involving the use of a pass
  • G07C9/22—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder

Definitions

• the present invention relates to a controller card and
• the use of cards as a means for gaining access to computers is well known in the art.
• the card is used as an identifying member which, once it is accepted, permits access only with respect to an individual code related to the identifying code on the card.
• the system is also time consuming, as the competence of each user is stored. This implies taht the computer must constantly search the competence of the various users to permit access, which implies a long searching time as the computer is occupied by this operating step. Also a large storage capacity is required.
• US patent 3 764 742 discloses a cryptographic identifying card. This cryptographic card is used as an identification system. After identification the software program takes over and gives the user access to a given account or the like.
• the controller card according to the invention comprises at least an identifying code which is associated with an individual code and at least one using and/or reference
• a discriminating operative system input/output characteristic system
• the identifying code is checked, whereupon the user is directed to state the individual code.
• the using and/or reference characteristics which are comprised in the card are raed in a reading unit, whereupon access to or access to and use of the computer, the data base or the hardware to which it is connected, is granted in
• the using and/or reference characteristics are read in co-operation with an input/output system whereupon
• the characteristics As soon as the identifying code has been confirmed by statement and acceptance of the individual code, whereupon access has been permitted, a reading of the using and/or reference characteristics comprised in the card is started. Thereupon the possessor is permitted access access or access and use of the computer, data base or the like in accordance with the directions and limitations of the using and/or reference characteristics.
• the using characteristics specify a limitation, for example time, date, area, level characteristics, which are comprised in the controller card. This means that even if someone would know the individual code of a single possessor, he or she cannot find out which limitations this implies as regards access or access and use of the computer or the like.
• Existing systems permit access according to stored competence data which are related to the identifying code.
• the controller card permits access or access and use of the computer, data base or hardware of other type during a certain period of the day, during specified days, within a specified area and at a specified level.
• the possessor can make use of the card only in accordance with the using and/or reference characteristics which are imposed on him, for example a certain time of the day and specified days.
• the possessor is allowed to enter into his area, for example Cad, word-processing or other area, and only with respect to the correct level characteristic, i.e. that the possessor can for example only update, copy etc.
• Figure 1 shows a controller card according to the invention.
• Figure 2 shows the reading unit corresponding to a controller card.
• Figure 3 shows schematically a series of events taking place when inserting the card and when the identifying code is accepted.
• Figure 1 shows a controller card 1.
• the controller card is provided with a magnetic layer 1 , bar codes or the like.
• an identifying code 2 which corresponds to an individual code 3, and thereupon follows at least one formatted using characteristic 4, which is digitalized, coded or the like. This may be for example: t e m p o r a l u s i n g c h a r a c t e r i s t i c s, i.e. specifying the time when the card is valid of access or access and use,
• the card Since the card comprises using characteristics, the card obtains a watching function and becomes a controller card which can retain the possessor from unauthorized use of the computer. Thereby, the use of the computer or hardware
• controller card whereto the controller card is connected can for example be controlled so that the possessor will not obtain access in unauthorized time, date or month, during periods of
• the use of the card produces an activation of the memory unit of the processing register, which thereby documents the identity of the user, the processing time, the
• the problem is that it is not possible to show what each individual user has done.
• the present system permits an identification which gives access to the use of the computer, but it is not checked physically that the
• FIG. 2 shows schematically the controller card with associate reading unit according to the invention.
• the controller card 5 is used in co-operation with a reading unit 6 connected to a key-board 7.
• the reading unit 6 with associated key-board 7 are connected to a processor 8, a memory unit and to the input/output characteristicssystem. These are connected to an I/O identifying system where the identifying code of the individual is read whereupon a specific code for the individual is entered and checked to correspond to the identifying code by the identifying circuit.
• the memory unit comprises directories connected to an operating register memory unit 10 which records the time of use, the operations performed, when and by whom.
• Figure 3 shows schematically the sequence of operations
• using and reference characteristics comprise characteristics for time, date, area, level etc.
• An operating register memory unit co-operates with the
• the card includes for example the temporal characteristics
• the possessor will have access or access and use of the
• reference characteristics are read whereupon the authorized area is opened: for example Cad/cam directory, word-processing, calculation, book-keeping etc.
• the area characteristic can be for example invoicing in which case this area is opened.
• Invoicing may be a directory for invoicing for services.
• invoicing it may be restrictions for example only to open up new files, i.e. write, invoice new services, or only to update in existing files.
• output system is a surveillance system which is active
• the I/O system will prevent access and
• controller card gives a very good secrecy and integrity protection and is moreover particularly easily administered.
• the input/ output system constantly carries surveillance of the use of the card so that no transgression occurs. Attempts at transgression are recorded and may release alarm of report.
• the input/output system permits the establishment of a
• a controller card includes a reference characteristic to another controller card, access or access and use of the computer or the like is subjected to a further restriction which is included in the reference characteristic. This may be for example that the possessor of the card has access only to the single journal, that of the card
• the computer is provided with two reading units, this may mean that it is desired to have the using and reference characteristics of one controller card connected to the reference characteristics of another controller card and that checking of the reference characteristics takes place simultaneously before the input/output system gives access according to the restrictions in the reference characteristic or characteristics. In this manner further strengthening of the control has been included.
• the reference characteristics may be used where double check is necessary, such as opening a strong-room or the like.
• the invention is not-limited to the above description, but many use characteristics and reference characteristics can be added.
• the number of reference characteristics and reading units can be multiplied.

Landscapes

• Engineering & Computer Science (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Computer Security & Cryptography (AREA)
• Theoretical Computer Science (AREA)
• General Engineering & Computer Science (AREA)
• Software Systems (AREA)
• Computer Hardware Design (AREA)
• Storage Device Security (AREA)
• Control Or Security For Electrophotography (AREA)
• Credit Cards Or The Like (AREA)
• Burglar Alarm Systems (AREA)
• Fittings On The Vehicle Exterior For Carrying Loads, And Devices For Holding Or Mounting Articles (AREA)
• Vehicle Body Suspensions (AREA)

Applications Claiming Priority (2)

Publications (1)

Family

ID=20375312

Family Applications (1)

Country Status (7)

Families Citing this family (1)

Family Cites Families (6)

• 1989
  • 1989-03-13 SE SE8900864A patent/SE463484B/sv not_active IP Right Cessation
• 1990
  • 1990-03-05 JP JP2505198A patent/JPH04505226A/ja active Pending
  • 1990-03-05 CA CA002049030A patent/CA2049030A1/en not_active Abandoned
  • 1990-03-05 WO PCT/SE1990/000142 patent/WO1990010919A1/en not_active Application Discontinuation
  • 1990-03-05 EP EP90905255A patent/EP0464103A1/en not_active Withdrawn
  • 1990-03-05 AU AU53368/90A patent/AU5336890A/en not_active Abandoned
• 1991
  • 1991-09-12 FI FI914283A patent/FI914283A0/fi not_active Application Discontinuation

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events